An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a users credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017).
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 4.4 (including) | 4.4 (including) | |
| Android | 5.0 (including) | 5.0 (including) | |
| Android | 5.1 (including) | 5.1 (including) | |
| Android | 6.0 (including) | 6.0 (including) | |
| Android | 7.0 (including) | 7.0 (including) |